XML External Entity Reference in Glances
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-23418US | critical9.8 | — | ||
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML atta… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-r2mj-8wgq-73m6ADVISORY
- https://github.com/nicolargo/glancesPACKAGE
- https://github.com/nicolargo/glances/commit/4b87e979afdc06d98ed1b48da31e69eaa3a9fb94WEB
- https://github.com/nicolargo/glances/commit/85d5a6b4af31fcf785d5a61086cbbd166b40b07aWEB
- https://github.com/nicolargo/glances/commit/9d6051be4a42f692392049fdbfc85d5dfa458b32WEB
- https://github.com/nicolargo/glances/issues/1025WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/glances/PYSEC-2021-115.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-23418ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan